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Abstract 

Although it is not known which groups can appear as torsion groups 
of elliptic curves over cubic number fields, it is known which groups 
can appear for infinitely many non-isomorphic curves. We denote the 
set of these groups as S. In this paper we deal with three problems 
concerning the torsion of elliptic curves over cubic fields. First, we 
study the possible torsion groups of elliptic curves that appear over 
the field with smallest absolute value of its discriminant and having 
Galois group S3 and over the field with smallest absolute value of its 
discriminant and having Galois group Z/3Z. Secondly, for all except 
two groups G £ S, we find the field K with smallest absolute value of 
its discriminant such that there exists an elliptic curve over K having 
G as torsion. Finally, for every G € S and every cubic field K we 
determine whether there exists infinitely many non-isomorphic elliptic 
curves with torsion G. 
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1 Introduction. 

The possible torsion groups of an elliptic curve over the rational numbers 
are known by a theorem of Mazur, who actually gave two different proofs of 
the theorem [13] and [14]. These groups are: 

Z/nZ, n = 1,...,10, 12, 

Z/2Z©Z/2nZ, n = 1,...,4. 

In a similar manner all the possible torsion groups over the collection 
of all quadratic fields were determined by Kenku and Momose [TT] and 
Kamienny |8j. The author determined the possible torsion groups over the 
quadratic cyclotomic fields Q(i) and Q(\/— 3) [13 [18], which are also the 
two quadratic fields with the smallest discriminant. 
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It was proven by Parent |21|, [22] that 13 is the largest prime that can 
divide the order of the torsion of an elliptic curve over a cubic field. Jeon, 
Kim and Schweizer [5] found all the groups that appear as torsion for in- 
finitely many non-isomorphic curves over cubic fields. These are the follow- 
ing groups: 

Z/nZ, n = 1,..., 16, 18, 20, 
Z/2Z0Z/2nZ, n = 1, . . . 7 

We denote the set of the above groups as S. Unfortunately, it is not 
known whether there are other groups that appear as torsion for only finitely 
many curves. For a cubic field K, we will denote by T(K) the set of all groups 
that appear as torsion of an elliptic curve over K but are not contained in 
the set S. Note that the union of all T{K) over all cubic fields is still a finite 
set, and one could use [20J to give an effective bound. But this bound would 
be huge and would not be of help for practical purposes. 

Since over the rationals and over quadratic fields all the groups that 
appear as torsion, do so for infinitely many curves, the possibility that T(K) 
is empty for all cubic fields is not unreasonable. 

In this paper we focus more on the torsion of elliptic curves over a single 
cubic field (as opposed to looking at all cubic fields simultaneously). We 
deal with three problems: 

1) Determine the possible torsion groups of an elliptic curve over the 
field with smallest discriminant and having Galois group S3 and over the 
field with smallest discriminant and having Galois group Z/3Z. 

2) Find for every group from S the field with the smallest discriminant 
having it as a torsion of an elliptic curve, 

3) Determine for how many non-isomorphic curves does each of the 
groups from S appear as torsion for any fixed cubic field K. 

Note that a similar problem to 1) was solved by the author in |17[I18] for 
quadratic fields. The analogues of 2) and 3) for quadratic fields were dealt 
with successfully by Kamienny and the author in [9]. 

We succeed in 1) under the assumptions that T{K) is empty for these 
fields K. We also eliminate some possibilities for T(K). 

We succeed in 2) for all the groups except for Z/20Z and Z/2Z0Z/14Z. 
The reason we fail for these groups is that the modular curves X\ corre- 
sponding to these groups are non-hyperelliptic of genus 3 and 4, and thus it 
is extremely hard to determine the existence of a cubic point on them. 

We solve problem 3) completely. When counting curves throughout this 
paper, we will always count them up to isomorphisms. 
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Although we follow the general strategy of [9] and [18] to handle these 
problems, since the problems are much harder over cubic than over quadratic 
fields, we will use various other methods, not previously used in [9j 118] . 

2 Torsion over cubic fields with smallest discrim- 
inant 

As we will be mentioning certain cubic fields many times in the remainder of 
the paper, for the convenience of the reader we list the first seven cubic fields 
(taken from [7]) ordered by ascending absolute value of the discriminant in 
the table below. In the table, i is the position of the field in the table, A the 
discriminant of the field, G its Galois group (the Galois group of its normal 
closure, to be precise) and in the last column in the table is the generating 
polynomial of the field. 



i 


A 


G 


Polynomial 


1 


-23 


S3 


x 6 - x 2 + 1 


2 


-31 


s 3 


x 6 + x — 1 


3 


-44 


S3 


x 3 — x 2 + x + 1 


4 


49 


Z/3Z 


x 6 — x 2 — 2x + 1 


5 


-59 


S3 


x A + 2x - 1 


6 


-76 


S3 


x :i - 2x - 2 


7 


81 


Z/3Z 


x 3 - 3x - 1 



Table 1. 



We will denote the i-th. field in the table as K{. We will focus on two 
fields, K\ and K4. The field K\ is the cubic field with the smallest discrimi- 
nant, while -K4 is both the field with smallest discriminant having Z/3Z as a 
Galois group and the totally real field with smallest discriminant. Note that 
both fields have class number 1 and that K4 is the maximal real subfield of 
the cyclotomic field Q(C?)- By on we denote the element generating K{. 

Let K be a number field. Denote by Y\{m,ri) the affine modular curve 
whose K-rational points classify isomorphism classes of triples (E,P m ,P n ), 
where E is an elliptic curve (over K) and P m and P n are torsion points (over 
K) which generate a subgroup isomorphic to Z/mZ©Z/nZ. For simplicity, 
we write Y"i(n) instead of Y\(l,n). Let Xi(m,n) be the compactification of 
the curve Yi(m,n) obtained by adjoining its cusps. 

Similarly, let Yq(N) be the affine curve whose irrational points classify 
isomorphism classes of pairs (E, C), where E is an elliptic curve and C is a 
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cyclic Gal{K / K)-invariant subgroup of E{K) of order N, or a N '-cycle. We 
obtain Xq(N) by adjoining the cusps to Yq(N). 

Nice models of the curves Xq (n) and X\ (n) can be found for example in 
[IJ[25], while the curves X x (2, 10) and Xi(2, 12) can be found in [23]. 

We will use division polynomials in many places in this paper. For a 
definition and more information on division polynomials see [23]. We denote 
by ip n the n-th division polynomial, which satisfies that, for a point P on 
an elliptic curve in Weierstrass form, ip n {x{P)) = if and only if nP = 0. 
Note that for even n one has to work with tpn/fa to get a polynomial only 
in one variable. 

We do our rank and torsion computations on elliptic curves and Jaco- 
bians of genus 2 curves throughout this paper using MAGMA. 
We first prove a useful lemma. 

Lemma 1. If the torsion group of an elliptic curve E overQ has a nontrivial 
2-Sylow subgroup, then over any number field of odd degree the torsion of E 
will have the same 2-Sylow subgroup as over Q. 

Proof. Let K be a number field of odd degree. If E(Q) ~ Z/2nZ, then the 
rest of the 2-torsion is defined over a quadratic field and hence not over K. 
So if the 2-Sylow group increases there must be a if-rational (but not du- 
rational) point P such that 2P = Q, where Q G E(<Q) is a nontrivial torsion 
point whose order is a power of 2. But for fixed Q the equation 2P = Q has 
exactly 4 solutions and it is easy to see that the orbits under the action of 
Gal(Q/Q) can only have lengths of 2 or 4. □ 

Theorem 2. Let T be a torsion group from Mazur's theorem and K a cubic 
number field. There exist infinitely many elliptic curves with torsion T over 
K. 

Proof. First note that by [5, Theorem 3.2] there are infinitely many elliptic 
curves over Q with each of the torsion groups from Mazur's theorem. 

Let K be a fixed cubic field. Let E be an elliptic curve defined over 
Q, such that E(Q) tors ~ Z/2Z. By Lemma H E(K) tors ~ Z/2nZ, where 
n is odd. From [151 Lemma 5.5] only finitely many quadratic twists of 
E{K) have any odd-order torsion and (since twisting does not change the 
2-torsion) hence all but finitely many twists will have torsion Z/2Z. In 
exactly the same manner one proves that there are infinitely many curves 
with E(K) tors ~ Z/2Z © Z/2Z. 

The only groups apart of the ones from Mazur's theorem that can a 
priori appear as the torsion of infinitely many elliptic curves over K are the 
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ones such that the corresponding modular curve has genus < 1 and that 
they appear on the list in [5j Theorem 3.4]. One can see that these are the 
groups Z/11Z, Z/14Z, Z/15Z, Z/2Z © Z/10Z and Z/2Z © Z/12Z. 

Let E be an elliptic curve over Q with torsion T = Z/2Z © Z/6Z or 
Z/2Z © Z/8Z. Then by Lemma E the 2-Sylow subgroups of E(Q) and 
E(K) are equal. Thus the torsion of E(K) is larger than E(Q) for only 
finitely many rational elliptic curves satisfying E(Q)t ors — T. 

By invoking Lemma Q] when needed, it also follows that there are only 
finitely many elliptic curves defined over Q with torsion Z/nZ, where n = 
6, 8, 9, 10 or 12 whose torsion becomes larger in K. 

Take E(t) to be the family of rational elliptic curves 

E(t) :y 2 + xy + (5t + 3)y = x 3 + (5t + 3)x 2 , 

t £ Z, with 4-torsion over Q. All elliptic curves in this family have good 
reduction at 5, and E(t)(¥ 5 ) ~ Z/4Z for all t G Z. This shows that E(t)(Q) 
cannot have any 8-torsion, 12-torsion or torsion containing Z/2Z © Z/4Z, 
for all t £ Z. As the 3-division polynomial of E(t) is an irreducible degree 
4 polynomial (over Q(t)), by Hilbert's irreducibility theorem, there are in- 
finitely many t such that E(t)(K) has no 3-torsion. Since by Lemma [H the 
2-Sylow subgroups of E(t)(Q) and E{t)(K) are equal, we have proved that 
there are infinitely many E{t) with torsion group Z/4Z over K. 
Let E(t) be the family of rational elliptic curves 

E(t) : y 2 + 5txy + (5t - l)y = x 3 + (5i - l)x 2 , 

t € Z, with 5-torsion over Q. All elliptic curves in this family have good 
reduction at 5, and E {£)(¥§) ~ Z/5Z for all t G Z. This rules out the 
possibility of 10-torsion in E(Q). If E(t)(K) had any 3-torsion, it would 
inject into the residue field of (a prime over) 5. But |i?(t)(Fi25)| = 140, 
implying that there is no 3-torsion in the residue field of (a prime over) 5, 
whatever the splitting behavior of 5 in K. This implies that E(t)(K) has 
no 15-torsion, for all t € Z. If E{t) is written in short Weierstrass form 
y 2 = x 3 + a(t)x + b(t), then the discriminant of x 3 + a(t)x + b(t) is a degree 
7 polynomial in £. This implies that there are infinitely many values t such 
that this polynomial generates a totally real cubic field and infinitely many 
values for which the same polynomial generates a complex cubic field. This 
now implies that infinitely many E(t) will not have any 2-torsion in K. 

A similar argumentation proves that infinitely many rational elliptic 
curves E with E(Q)t ors — Z/7Z will have no 2-torsion in K and thus have 
E(K) tors ~Z/7Z. ' 
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We take the families of elliptic curves with 3-torsion 

Ei(t) : y 2 + ({-lyiOt + 2)xy + (KM + l)y = x 3 , 

where i = 1 or 2 and t is a non-zero integer. Note that all curves from both 
families have good reduction at 5, and Ei(t)(¥^) ~ Z/3Z, and hence Ei(t)(Q) 
has no 2-torsion or 9-torsion. Thus all curves from these two families have 
torsion group isomorphic to Z/3Z. If K is complex, then we choose E2(t) 
and if K is totally real, we choose E\(t). The discriminant of Ei(t) will then 
be of opposite sign than the discriminant of K (implying that there is no 
2-torsion in Ei(t)(K)). All curves from both families have good reduction 
at (a prime over) 2, and have either 3 or 9 points in the residue field of (the 
prime over) 2. This rules out the possibility of 15-torsion in any E^{t){K). 
By factoring the 9-division polynomial of Ei(t) and taking out the factors 
belonging to the 3-division polynomial, we are left with factors of degree 
larger than 9 (as polynomials over Q(t)). This means that, by Hilbert's 
irreducibility theorem, for infinitely many values t, there will be no 9-torsion 
in Ei(t)(K). 

Let E{t) be the family of rational elliptic curves with 

E(t) :y 2 + xy- ((5i + 2) 2 - ±-)y = x 3 - ((5i + 2) 2 - ±-)x 2 , 

lb lb 

where t £ Z, containing Z/2Z © Z/4Z as a torsion subgroup over Q. All 
curves in the family have good reduction at 5, and all curves have 8 points in 
F5. This proves that none of the curves have torsion Z/2Z©Z/8Z and that 
Z/2Z © Z/4Z is the whole torsion group over Q. The 3-division polynomial 
is irreducible (over Q(t)) and by Hilbert's irreducibility theorem, there are 
infinitely many curves E(t) that have no 3-torsion over any cubic field. 
Finally, after applying Lemma [U we have proved that there are infinitely 
many curves with torsion Z/2Z © Z/4Z over K. 

As we have already proved that there are infinitely many elliptic curves 
with odd torsion over K, from |15|, Lemma 5.5] we conclude that each of 
these curves has a twist with trivial torsion. Thus there are infinitely many 
elliptic curves with trivial torsion over K. □ 

Theorem 3. Suppose T(K\) = 0. Then the torsion of an elliptic curve over 
K\ is isomorphic to one of the groups 

Z/nZ, n = 1,... 10,12, 

Z/2ZffiZ/2nZ, n = 1,...4,6. 
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All of the groups actually appear as a torsion of infinitely many curves over 
K x . 

Proof. By Theorem [2j all the torsion groups from Mazur's theorem appear 
infinitely often over K\. 

The modular curve Xi(ll) is an elliptic curve with an affine model 
y 2 — y = x 3 —x 2 . We compute that Xi(ll)(Ki) has rank and Xi(ll)(Ki) ~ 
Xi(ll)(Q) ~ Z/5Z, so all the points Xi(ll)(Ki) correspond to cusps, im- 
plying the non-existence of an elliptic curve with 11-torsion over K\. 

The modular curve Xi(14) is an elliptic curve with an affine model 
y 2 + xy + y = x 3 — x. We compute that X\(14)(K\) has rank and 
Xi(14)(i^i) ~ Xi(14)(Q) ~ Z/6Z, so all the points Xi(ll)(K x ) correspond 
to cusps, implying the non-existence of an elliptic curve with 14-torsion over 

The modular curve Xi(15) is an elliptic curve with an affine model y 2 + 
xy + y = x 3 + x 2_ We compute t h a t X 1 (15)(i^i) ~ Xi(15)(Q) ~ Z/4Z, the 
points on Xi(15)(iTi) again being cusps, thus proving the non-existence of 
15-torsion over K\. 

The modular curve -X"i(2, 10) is an elliptic curve with an affine model 
y 2 = x 3 + x 2 _ x _ We compute t hat Xi(2, 10) (Kx) ~ Xi(2, 10) (Q) ~ Z/6Z, 
the points on X\(2, W)(Ki) being cusps, implying that there does not exist 
an elliptic curve with torsion Z/2Z © Z/10Z over K±. 

The modular curve X±(2, 12) is an elliptic curve with an affine model 
y 2 = x 3 - x 2 + x. We compute Xi(2, 12)(K{) ~ Z/4Z © Z, where (2a? - 
l,2af - 2ai - 3) is an element of infinite order. Since each point on 
X\(2,\2)(K\) corresponds to an isomorphism class of elliptic curves with 
torsion Z/2Z © Z/12Z over K\, it is easy to see that there are infinitely 
many curves with this torsion. 

The modular curve X\(13) is a hyperelliptic curve of genus 2 having an 
affine model y 2 = x 6 — 2x 5 +x 4 — 2x 3 +6x 2 — 4x+l. Denote by Ji(N) the Jaco- 
bian of X\(N). We embed the curve into its Jacobian Ji(13)(ifi), and com- 
pute that Ji(13)(iTi) ~ Z/19Z. The rank of the Jacobian can be computed 
in MAGMA, while for the computation of the torsion, we use the MAGMA 

code of S. Siksek that can be found at http : //www. Warwick, ac .uk/ staf f /S .Siksek/progs/ chabnf /g: 

(although we could manage to compute the torsion by examining the Ja- 
cobian over finite fields, as in [18J). We then proceed to compute the fiber 
of the map Xi(13)(K\) — > J\(12>)(Ki) and thus find that all the points on 
Ai(13)(i^i) are cusps. 

The modular curve Xi(16) is a hyperelliptic curve of genus 2 having an 
affine model y 2 = x 5 + 2x 4 + 2x 2 — x. In a similar way as above we compute 
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Ji(16)( J FCi) ~ Z/2Z0Z/1OZ, and find that all the points on Xi(16)(Ki) are 
cusps. 

The modular curve X\(18) is a hyperelliptic curve of genus 2 having an 
affine model y 2 = x 6 + 2x 5 + 5x 4 + 10x 3 + 10x 2 + Ax + 1. In a similar 
way as above we compute Ji(18)(Ki) ~ Z/21Z, and find that all points on 
Xi(18)(ifi) are cusps. 

As there is no 14-torsion over Ki, there obviously does not exist a curve 
with torsion Z/2Z Z/14Z. 

It remains to prove that there is no 20-torsion. As we mentioned in the 
introduction, the methods used above are hard to use on X\(20) as it is 
a non-hyperelliptic curve of genus 3. We will instead work with A"o(20), 
and prove a stronger statement, i.e. that there is no 20-cycle over K\. 
The modular curve Xq(20) is an elliptic curve with an affine model y 2 = 
(x + l)(x 2 +4) (see [25]), and we compute X (20) {K x ) ~ X (20)(Q) ~ Z/6Z. 
It is known (see [19]) that Xq{Ap) has 6 rational cusps when p is a prime, 
so we conclude that all the points on Ao (20) (if i ) are cusps. □ 

In general, for any cubic field K, it is known that there are no points of 
order 55 [11] Remark (2.3)], 27 or 64 [16, Theorem B] over K. 

Remark 1. One could also easily prove that there is also no 21-torsion 
over K\ in a similar same way as it was proven that there is no 20-torsion. 
One finds that Xo(21)(i£"i) = Xo(21)(Q), having 4 noncuspidal points, cor- 
responding to the 4 rational curves having a 21-cycle, and none of them 
having 21-torsion. Unfortunately, this is all we can say about T{K\). 

Theorem 4. Suppose T(K^) = 0. Then the torsion of an elliptic curve over 
K4 is isomorphic to one of the groups 

Z/nZ, n = 1, ... 10, 12, 13, 14, 18 

Z/2Z0Z/2nZ, n = 1,...4. 

The groups that appear over Q appear infinitely many times as torsion, while 
all the other groups appear only finitely many times. 

Proof. We first compute in a similar manner as in the proof of Theorem [3] 
that Vi (11)^4) is empty. 

Next we find that the rank of X\{1A)(K4) is and the torsion is Z/18Z. 
These 18 points comprise all the cusps of Ai(14) (6 rational over Q and 6 
rational over K4), and the 6 noncuspidal points generate exactly two curves 
(if P is a point of order 14 on E, then (E, ±P), (E, ±3P) and (E, ±5P) are 
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three distinct points on Xi(14) corresponding to the same curve E), which 
are 




9q| - 13a 4 + 1 



xy + 



8a| - 4a 4 - 19 




8a>l 



4a 4 - 19 




7 



7 



7 



and 




3a| + 5a 4 + 5 



xy + 



8a| + 7a 4 - 4 
7 




8al + 7a 4 - 4 
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both with the 14-torsion point (0,0). The curves ([TJ and ([2]) have j- 
invariants 255 3 and — 15 3 respectively, and both are CM curves. Note that 
Xi(14) is itself an elliptic curve, so we have simultaneously proved that 
there also exists an elliptic curve with 18-torsion over As the curves 
above are the only ones with 14-torsion, by checking that they do not have 
another 2-torsion point, we prove that there are no curves over K4 with 
torsion Z/2Z © Z/14Z. Both curves have rank 0, so over K4 there are no 
elliptic curves having Z/14Z © Z as a subgroup. 

One finds in exactly the same way as in Theorem [3] that there are no 
elliptic curves over K4 with torsion subgroups Z/15Z, Z/16Z, Z/2Z©Z/10Z, 
Z/2ZffiZ/12Z. 



As Xi(4iV) is a cover of Xi(2, 27V), and Yi(2, 10)(iT 4 ) = 0, one sees that 
Yi(20)(# 4 ) = 0- 



We find noncuspidal points on X\(13) and construct from one of them 
the curve (which has rational j-invariant) 

y 2 + {Aa\ - 2a 4 - 8)xy + (20al - lla 4 - 45)y = x 3 + (20a^ - lla 4 - 45)x 2 , 

with the point (0, 0) of order 13. 

Note that since Xi(13) and Xi(18) are curves of genus 2, by Faltings' 
theorem there are only finitely many points on them over K4 and hence only 
finitely many elliptic curves with 13-torsion and 18-torsion. □ 

We can say more about T{K^) than we did for T{K\). 

Proposition 5. The groups Z/21Z, Z/24Z, Z/28Z, Z/32Z, Z/35Z, Z/36Z, 
Z/49Z,Z/52Z,Z/2Z©Z/26Z are not in T(K A ). 

Proof. One proves the non-existence of 21-torsion exactly the same way as 
over K\. The non-existence of 24-torsion follows from Yi(2, 12) = 0. 

As proven in Theorem HI there are only two curves having Z/14Z as a 
subgroup, and one easily checks that neither of them contains Z/28Z. 



9 



The non-existence of iV-torsion for N = 32,36 and 49 is proven by 
showing that the elliptic curve Xq(N) has rank and checking that all the 
torsion points are actually cusps. For all the curves except Xq{32), MAGMA 
easily computes the rank using 2-descent. For Xq{32) it only gives an upper 
bound of 2. However we can compute that the analytic rank is equal to 
0, and since K4 is a totally real field of odd degree, [26J implies that the 
algebraic rank is also equal to 0. 

Since Ao(35) is a genus 3 (hyperelliptic) curve, it is better not to work 
with Ao(35) directly. Instead, we can redo the proof of Kubert |12} Propo- 
sition IV. 3. 5.] over K4. We work with Xq(35)/w^, where w§ is an Atkin- 
Lehner involution. There is a nice model of Ao(35)/w;5: 

E : y 2 + y = x 3 + x 2 + 9x + 1. 

We compute that E{K^) = E(Q) — Z/3Z, and as already shown in |12j . 
these 3 points come from cusps of Xq(35), thus proving that there is no 
35-cycle over K±. 

By [2] for a rational elliptic curve E of conductor N there exists a mor- 
phism 

X (N) — > E 

called modular parametrization. To eliminate Z/52Z and Z/2Z©Z/26Z we 
more or less follow the strategy of the proof of [U Theorem 4.2]. We easily 
compute that for the elliptic curve 

E : y 2 = x 3 + x - 10 

with conductor 52 it holds E(K±) ~ E(Q) ~ Z/2Z and that the degree 
of the modular parametrization is 3. Thus there are at most 6 points on 
X (52){K 4 ), but (see pj) X (52) has 6 rational cusps, so Y (52)(K 4 ) = 0, 
implying Z/52Z, Z/2Z © Z/26Z T{K A ). 

□ 

Remark 2. One can prove that if Z/25Z T(K 7 ), then T(K 7 ) = 
in the following way. First, one uses the same methods as in the proofs 
of Theorems [3] and H] to prove that there are no elliptic curves with points 
of order 11, 13, 14, 15, 16, 18 and that no curve contains Z/2Z © Z/12Z 
as a subgroup. We find that there are infinitely many curves containing 
Z/2Z © Z/10Z and are unfortunately unable to determine whether there 
exists a curve with 20-torsion. The non-existence of an elliptic curve having 
a point of order 21, 24, 35 or 49 is proved in exactly the same way as in 
the proof of Proposition [5j Finally, we use the modular parametrization (of 
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degree 4) Xo(40) — > E, where E is the elliptic curve y 2 = x 3 — 107x — 426 
with E{Kj) = E(Q) ~ Z/2Z, to prove the non-existence of a 40-cycle, ruling 
out Z/40Z and Z/2Z © Z/20Z as possible subgroups. Note that all other 
non-cyclic torsion groups are ruled out by the Weil pairing. 

For any cubic field K it seems hardest to rule out the existence of 25- 
torsion in T(K), as Xo(25) has genus (and infinitely many points) and 
Xi(25) has genus 12. There is an intermediate curve B 



(where the numbers above the arrows denote the degrees of the maps), which 
was used by Kubert [12] to prove the non-existence of rational 25-torsion 
and by Kenku [lOj to show that there is no 25-torsion over quadratic fields. 
However this is still a curve of genus 4, and is thus not suited for the methods 
used in this paper. 

3 Cubic fields with smallest discriminant with a 
given torsion group appearing over them 

In this section we will find, for a given group G € S-{Z/20Z, Z/2ZffiZ/14Z} 
the cubic field K with smallest absolute value of its discriminant such that 
G appears as torsion of some elliptic curve E{K). We will follow the same 
general strategy as Kamienny and the author [9], by examining fields by 
ascending |A(X)| and for each field either finding an elliptic curve with 
given torsion or proving the non-existence of such a curve. For a group 
G £ S, we denote that field by M(G). 

Proposition 6. M(Z/2Z © Z/12Z) = K x . 

Proof. This follows directly from Theorem [3j □ 

Proposition 7. M (Z/14Z) = M(Z/2Z © Z/10Z) = K 2 . 

Proof. From Theorem[3l we see that Z/14Z and Z/2Z©Z/10Z do not appear 
as torsion groups over K\. We compute rank{Xi(l4)(K2)) = 1, and find 
the elliptic curve 



Xi(25) 



2 



+ B 



5 



+ ^o(25) 




13o| 



+ 8a 2 + 29 
9 



xy+ 



35a^ 



- 25a 2 - 49 
27^ 



y = x 3 + 



35a 2 . 



25a 2 - 49 



x 



2 



27 



with the point (0, 0) having order 14. 
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In a similar way we compute rank{X\ (2, 10) (.K2)) = 1 an d find an elliptic 
curve with torsion Z/2Z © Z/10Z, for example 

2 -o| - 9a 2 + 6 -84o| - 52a 2 - 145 , -84a§ - 52a 2 - 145 , 
v H x-yH £ v = x H x . 

□ 

Proposition 8. M(Z/11Z) = M(Z/13Z) = M(Z/15Z) = K 3 . 

Proof. One easily computes that Xi(ll)(Ki) ~ Z/5Z has only cusps for 
z = l,2 and Xi(ll)(K 3 ) ~ Z/10Z (the rank of Xi(ll) is over K 3 ). We 
obtain that there is exactly one (up to isomorphism) elliptic curve with 
11-torsion over K 3 , this curve being 

y 2 + (3o| - 5a 3 - 3)xy + (80^ + 8a 3 + 2)y = x 3 + (2a| - 10a 3 - 6)x 2 (3) 

Note that this curve has rank 0. 

One can compute that Yi(15)(Ki) = for i = 1,2 and that the rank of 
Xi(15)(-K" 3 ) is 1. We find an elliptic curve 

y 2 + (a 2 3 + a 3 + 5)xy + (8a 2 3 - 4a 3 + 4)y = x 3 + (2a 2 3 - a 3 + l)x 2 

with 15-torsion. 

We compute that rank(Ji(13)) = over the fields with smaller discrimi- 
nant. Then it is easy to check that there are no elliptic curves with 13-torsion 
over those fields. Over K 3 we find that Ji(13) has positive rank, and by a 
simple search we find points on Yi(13), obtaining the elliptic curve 

y 2 + (-a 2 3 + 2)xy + (a 2 3 - 2a 3 + l)y = x 3 + (a 2 3 - 2a 3 + l)x 2 . 

□ 

Proposition 9. M(Z/18Z) = K A . 

Proof. One computes that the rank of the J\{lS){Ki) is and Yi(18)(i£j) = 
for i < 4. In Theorem HI it was already proved that 18-torsion appears 
over K A . □ 

Proposition 10. Af (Z/16Z) = K 5 . 

Proof. This is proved exactly as the previous proposition. We give a curve 
with 16-torsion over K^: 

y 2 + (-q 5 + 2)xy + {-a\ - 2a 5 + l)y = x 3 + (-a| - 2a 5 + l)x 2 . 

□ 
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Proposition 11. Let M(Z/20Z) = L 1 and M(Z/2Z © Z/14Z) = L 2 . T/ien 
|A(Li)| < 316 and |A(L 2 )| < 961. 

Proof. One finds an elliptic curve with 20-torsion over K^q, the 40-th field 
in the table [7j, generated by the polynomial x 3 — x 2 — 4x + 2 by putting 
i = 2 into [61 Table 1, JV = 20]. Note that the polynomials 4x 3 + 8x 2 + x - 2 
obtained from [6, Table 1, N = 20] and x 3 — x 2 — 4x + 2 (from [7]) differ but 
they generate the same field. The field is a S3 cubic field. 

We find an elliptic curve with torsion Z/2Z©Z/14Z over ^143, the 143- 
th field from [7J, generated by x 3 — x 2 — Wx + 8, using [6, Example 4.3]. 
The polynomials from [7] and [6, Example 4.3] differ, but they generate the 
same field. The field ^143 is a cyclic cubic field. □ 

4 The number of elliptic curves with given torsion 
over a number field 

In this section we examine the number (up to isomorphism) of elliptic curves 
over cubic number fields. We will ignore the groups that appear as torsion 
already over Q as by Theorem [2] they appear as torsion over every cubic 
field infinitely many times. 

The same problem (again ignoring the groups from Mazur's theorem) for 
quadratic fields was dealt with in [9]. It was shown that for some groups, 
if there is one curve with given torsion there are infinitely many, for some 
groups there are always finitely many, while for some groups, over some 
quadratic fields there will be finitely many, and over others infinitely many. 

We obtain the following result for cubic fields. 

Theorem 12. a) There are only finitely many elliptic curves with torsion 
Z/13Z, Z/16Z, Z/18Z, Z/20Z and Z/2Z©Z/14Z over any fixed cubic field. 

b) Over any cubic field there is either no curve with torsion Z/15Z, Z/2Z© 
Z/10Z and Z/2Z©Z/12Z or there are infinitely many. 

c) There is exactly one curve with 11 -torsion over K^. This is the curve 
Over any other cubic field there are either no elliptic curves with 11-torsion 
or there are infinitely many. 

d) There are exactly two curves with 14-torsion over K^. These are the 
curves ([!]) and (0). Over any other cubic field there are either no or infinitely 
many such curves. 

e) For each of the groups Z/11Z, Z/14Z, Z/15Z and Z/2Z© Z/12Z there 
exist infinitely many cubic fields with Galois group S3 over which there exist 
infinitely many elliptic curves with that torsion. There exist infinitely many 
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totally real cubic fields over which there exist infinitely many elliptic curves 
with torsion Z/2Z © Z/10Z. 

Proof, a) Since all the modular curves parameterizing these torsions are of 
genus > 2, the result follows trivially from Faltings' theorem. Actually, the 
statement is true over a number field of any degree. 

b) The only way it is possible that there is a finite number of curves 
with a torsion group parameterized by a modular curve X\ of genus 1 is 
that over some cubic field the torsion of X\(K) is larger than -Xi(Q) and 
that rank(X\(K)) = 0. We can find the possible candidates for this by 
examining the division polynomials of X\. 

By |2H I22| the only primes that can divide the order of the torsion are 
the primes up to and including 13. 

We start with Xl(15). Note that X X (15)(Q) ~ Z/4Z. We easily compute 
that ip n (Xi(15)) for n = 3,5, 7, 11, 13 are all irreducible of degree larger than 
3, and hence ip n (X\ (15)) will not have a root over any cubic field. By Lemma 
[T]the 2-Sylow subgroups of Xi(15)(Q) and X\ (15) (K) are equal for all cubic 
fields K. 

We compute X-y{2, 10)(Q) ~ Z/6Z and ^„(Jfi(2, 10)) for n = 5,7,11,13 
are all irreducible of degree larger than 3, and hence ?p n (Xi(2, 10)) will not 
have a root over any cubic field. By Lemma Q] there are n ° additional cubic 
points of order 2 n . The polynomial ifig(Xi(2, 10)) factors as (x — l)(x 3 + 
7/3x 2 + l/3x + l/3)/g/27, where f§ and /27 are irreducible polynomials of 
degree 9 and 27. The points with x = 1 correspond to the rational points of 
order 3. We see that there is a factor of degree 3 in the factorization implying 
that the x-coordinate of an additional element of order dividing 9 satisfies 
x 3 + 7/3x 2 + l/3x + l/3. We examine X±(2, 10)(Q(a)), where a is the root of 
x 3 + 7/3x 2 + l/3x + l/3. We check that the torsion of Xi(2, 10)(Q(a)) is still 
Z/6Z. This is because the y-coordinate of the point corresponding to this 
polynomial is not defined over Q(q). It is in fact defined over Q(a, \J — 3), 
over which X\{2, 10) has torsion Z/3Z© Z/6Z. We conclude that there are 
no noncuspidal cubic torsion points on Xl(2, 10) that are not defined over 
Q. 

We compute X 1 (2, 12) (Q) ~ Z/4Z and ^(Xi (2, 12)) for n = 3,5,7,11,13 
are all irreducible of degree larger than 3, and hence ip n (X± (2, 12)) will not 
have a root over any cubic field. By Lemma [1] there are no cubic points of 
even order apart from the ones defined over Q. 

c) Prom the short Weierstrass form we see that K% is the only cubic field 
over which Xi(ll) has a 2-torsion point. Over any other cubic field, X\ has 
odd torsion. As Ai(ll) has good reduction at (a prime over) 2, its whole 
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torsion subgroup embeds into the residue field of (a prime over) 2. By the 
Hasse-Weil bound, an elliptic curve can have at most 13 points over that 
field, so only Z/5Z (~ Zi(ll)(Q)) is possible. 

d) We compute Zi(14)(Q) ~ Z/6Z and ^„(Xi(14)) for n = 5,7,11,13 
are all irreducible of degree larger than 3, and hence ip n (Xi{l£)) will not 
have a root over any cubic field. By Lemma Q] there are n ° additional cubic 
2 n -torsion points. The polynomial ip§{Xi(lA)) factors as x(x 3 — 2x 2 — x + 
l)(x 3 + x 2 /3 — x + l)/6/27> where fe and /27 are irreducible polynomials of 
degree 6 and 27. Note that the first polynomial generates and, as shown 
in Theorem HI X\{\^){K^) ~ Z/18Z and the additional torsion generates 
just the curves (P) and ([2]). Let K be the field generated by x 3 + x 2 /3 — x + 
1. We check that although the x-coordinate of additional torsion points is 
defined over K, the y-coordinate is not. Actually, the situation is similar to 



Xi(2,10), i.e. X 1 {1A){K{^/^,)) ~ Z/3Z Z/6Z. 



e) We use the proof of [5j Lemma 3.3. (b)], where it is proved that if an 
elliptic curve E is written in the form Y 2 = X 3 + Ax + B, A, B G Z, then 
one can construct an infinite sequence of primes pi such that the roots £j of 
X 3 + ^x + B - p^ 20 generate distinct cubic fields Q(&), such that E(Q(&)) 
has positive rank. For the modular curve Xx(2, 10), the discriminant of 
X 3 + ylx + -B is positive, so for all but finitely many pi, the discriminant of 
X 3 + Ax + B —p~ 20 will also be positive. Hence Xi(2, 10) will have positive 
rank over infinitely many totally real cubic fields. On the other hand, for 
the remaining modular curves of genus 1, the discriminant of X 3 + Ax + B 
is negative, implying that for all but finitely many p^, the discriminant of 
X 3 + Ax + B — p~ 20 will also be negative. Hence these modular curves will 
have positive rank over infinitely many cubic fields with Galois group S3. 
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